Senior Product Security Engineer

Responsibilities

• Architect and enforce security controls for AI/ML systems, including model training, data pipelines, inference environments, and agentic workflows.
• Identify and mitigate AI-specific attack vectors, including prompt injection, data poisoning, model inversion, and model theft.
• Implement model provenance, integrity, and auditability controls for secure AI operations.
• Embed security, privacy, and compliance throughout application and AI development lifecycles.
• Define secure development standards, guidance, best practices, automation, and governance integrated into development workflows.
• Lead threat modeling, secure design reviews, and risk assessments across the software development lifecycle.
• Produce customer-facing security questionnaires, whitepapers, and trust collateral to support enterprise deals.
• Mentor engineering teams and promote a security-first culture through advocacy, documentation, and training.

Requirements

• 5–7+ years of experience in product, application, or cloud security engineering.
• Deep understanding of secure SDLC, threat modeling, and secure architecture design.
• Ability to read and review code for threat modeling and design reviews.
• Experience securing AI/ML pipelines, data workflows, model-serving infrastructure, and AI/LLM systems.
• Working knowledge of AI/LLM security topics including prompt injection, model integrity, and provenance.
• Expertise in cloud security concepts and practices across multi-cloud environments.
• Familiarity with DevSecOps and CI/CD environments.
• Knowledge of encryption, TLS/mTLS, key management, secrets handling, OAuth 2.0, OIDC, SAML, RBAC, and ABAC.
• Ability to lead cross-functional security initiatives and influence engineering, product, and compliance stakeholders.
• Preferred experience with Python, Java, or JavaScript for security automation and tooling.
• Preferred experience with Kubernetes runtime protection, software supply chain security, artifact integrity verification, and bug bounty programs.
• Preferred familiarity with SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF.
• Certifications such as CKS, CISSP, CSSLP, or AI/ML security credentials are desirable.

Benefits

• Opportunity to work on cutting-edge security challenges and shape product security strategy.
• Collaborative, security-minded engineering culture with career growth opportunities.
• Competitive compensation, performance-based bonus, equity, and a benefits program.
• Base compensation range of $159,000—$219,000 CAD.